03.06.04 Incident Response Training

This policy outlines the requirements for providing effective incident response training to all personnel with assigned roles and responsibilities related to incident response activities within the organization. It covers the initial training requirements, ongoing training needs, and the procedures for reviewing and updating training materials to ensure they remain relevant and effective in addressing evolving threats and organizational changes.

• A.03.06.04.ODP[01]: the time period within which incident response training is to be provided to system users is defined.
• A.03.06.04.ODP[02]: the frequency at which to provide incident response training to users after initial training is defined.
• A.03.06.04.ODP[03]: the frequency at which to review and update incident response training content is defined.
• A.03.06.04.ODP[04]: events that initiate a review of the incident response training content are defined.
• A.03.06.04.a.01: incident response training for system users consistent with assigned roles and responsibilities is provided within of assuming an incident response role or responsibility or acquiring system access.
• A.03.06.04.a.02: incident response training for system users consistent with assigned roles and responsibilities is provided when required by system changes.
• A.03.06.04.a.03: incident response training for system users consistent with assigned roles and responsibilities is provided thereafter.
• A.03.06.04.b[01]: incident response training content is reviewed .
• A.03.06.04.b[02]: incident response training content is updated .
• A.03.06.04.b[03]: incident response training content is reviewed following .
• A.03.06.04.b[04]: incident response training content is updated following .